$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75b25e31-90b9-4953-8c86-ac102b2de2f7.roa File: 75b25e31-90b9-4953-8c86-ac102b2de2f7.roa (raw, json) Hash identifier: l/rBgaxAmYzYx5rQitGgaNCtEaFFDy6f8VFQBjvSpz0= Subject key identifier: F1:34:99:53:49:B8:63:36:17:5E:7F:58:17:66:A7:79:0F:01:24:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51F422CC7BAE3FD1978819D27EBBE913C7080E6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75b25e31-90b9-4953-8c86-ac102b2de2f7.roa Signing time: Thu 25 Sep 2025 18:14:41 +0000 ROA not before: Thu 25 Sep 2025 18:14:41 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f4:22:cc:7b:ae:3f:d1:97:88:19:d2:7e:bb:e9:13:c7:08:0e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:14:41 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=556aaf3ff4eebc8c150fe63e2e4c9adf8e3e4c6c6ee4e7d0e7c1de9d33cfe40f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:4f:4e:ee:e0:c7:c5:e4:e3:81:4b:09:77: f8:5b:1f:34:10:a3:e7:27:f2:a3:77:37:f4:af:05: f0:8b:32:3f:22:9f:8c:bc:18:92:39:78:91:ae:59: b1:9f:fc:a7:6d:b7:ff:fd:1e:e3:39:ff:40:8d:d7: 1e:3c:a6:e0:f6:13:05:27:ec:5b:77:f1:94:01:b4: d3:d6:bf:41:c6:ed:99:bc:a6:00:16:9b:c8:2e:ff: 9c:fc:52:b5:2d:34:59:82:50:52:2e:32:ab:a9:f8: a0:54:b5:86:4b:a2:b6:a7:ac:b3:1c:df:7c:cc:f0: f3:96:b6:2a:34:a9:65:ea:b3:38:92:d0:e1:ce:2a: 9c:49:f7:95:cf:dd:e7:50:13:94:de:58:1c:47:84: 98:f5:e4:c2:91:b7:bd:e3:32:83:7f:b5:f3:76:b3: 52:a0:b1:e7:64:05:6e:1a:af:2b:32:27:ab:4b:98: 8b:94:7a:6d:0a:c5:2e:2f:12:a1:f5:34:86:ac:6e: c4:46:14:2b:b4:37:db:b8:0b:3a:1c:09:35:9d:1c: 58:24:cc:83:47:00:b4:ff:8d:9e:ad:2c:4d:dd:84: 32:c7:29:e6:f5:07:7c:9d:41:9e:9a:15:32:cf:94: a9:ad:e4:18:9e:4b:68:de:96:47:6c:c1:41:81:5f: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:99:53:49:B8:63:36:17:5E:7F:58:17:66:A7:79:0F:01:24:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75b25e31-90b9-4953-8c86-ac102b2de2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.153.0/24 Signature Algorithm: sha256WithRSAEncryption 57:cf:16:d8:a0:1b:b0:40:13:fc:c2:ff:a4:8c:73:3e:54:54: 0f:64:8f:46:cd:b7:6b:90:13:65:a2:b0:ee:1d:56:39:d3:0f: 35:b5:b2:aa:39:3a:16:4b:9d:05:83:19:dd:67:1b:20:a3:a3: 53:64:01:1d:09:17:a0:0c:7d:3b:77:25:e6:83:41:2f:11:a9: f2:47:86:58:93:df:51:3d:11:1d:e8:c2:2e:8c:66:62:c0:9f: 9d:f7:61:b8:b3:1f:3a:96:1c:b2:80:3e:8f:36:c0:09:73:4c: b7:35:80:bc:f2:a0:d3:a7:54:c7:00:83:55:c9:fc:04:f7:e6: a4:c6:39:f5:0c:20:73:8a:89:01:d2:f2:1a:38:32:65:ff:86: ac:4d:fa:4f:ef:e5:08:72:30:5f:1b:80:b5:50:e1:1b:1d:a4: dc:34:38:2b:55:06:fa:b2:25:22:e6:3f:57:0a:3a:bc:3c:97: 7a:0e:4e:de:09:98:6d:3e:37:4b:d6:e2:98:6d:57:d9:e7:eb: ba:c6:39:bb:f5:ee:ef:84:29:e1:b6:2e:d7:5f:d7:11:01:57: 85:a0:72:19:66:67:11:5a:5d:fc:9f:cf:63:5b:98:8c:1e:b9: e7:13:ee:14:ad:75:45:9e:d0:e1:dd:bf:0a:89:f7:46:8e:41: fa:92:14:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUfQizHuuP9GXiBnSfrvpE8cIDm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxNDQxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTZhYWYzZmY0ZWViYzhjMTUwZmU2M2UyZTRjOWFkZjhl M2U0YzZjNmVlNGU3ZDBlN2MxZGU5ZDMzY2ZlNDBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYZU9O7uDHxeTjgUsJd/hbHzQQo+cn8qN3N/SvBfCLMj8i n4y8GJI5eJGuWbGf/Kdtt//9HuM5/0CN1x48puD2EwUn7Ft38ZQBtNPWv0HG7Zm8 pgAWm8gu/5z8UrUtNFmCUFIuMqup+KBUtYZLoranrLMc33zM8POWtio0qWXqsziS 0OHOKpxJ95XP3edQE5TeWBxHhJj15MKRt73jMoN/tfN2s1KgsedkBW4arysyJ6tL mIuUem0KxS4vEqH1NIasbsRGFCu0N9u4CzocCTWdHFgkzINHALT/jZ6tLE3dhDLH Keb1B3ydQZ6aFTLPlKmt5BieS2jelkdswUGBX+gFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8TSZU0m4YzYXXn9YF2aneQ8BJNAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1YjI1ZTMxLTkwYjktNDk1My04Yzg2LWFjMTAyYjJkZTJmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpZkwDQYJKoZIhvcNAQELBQADggEBAFfPFtigG7BAE/zC/6SMcz5UVA9k j0bNt2uQE2WisO4dVjnTDzW1sqo5OhZLnQWDGd1nGyCjo1NkAR0JF6AMfTt3JeaD QS8RqfJHhliT31E9ER3owi6MZmLAn533YbizHzqWHLKAPo82wAlzTLc1gLzyoNOn VMcAg1XJ/AT35qTGOfUMIHOKiQHS8ho4MmX/hqxN+k/v5QhyMF8bgLVQ4RsdpNw0 OCtVBvqyJSLmP1cKOrw8l3oOTt4JmG0+N0vW4phtV9nn67rGObv17u+EKeG2Ltdf 1xEBV4WgchlmZxFaXfyfz2NbmIweuecT7hStdUWe0OHdvwqJ90aOQfqSFGg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:31 2025 by rpki-client